Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 541
GHSA-r99q-hmqv-xw8w
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GHSA-gq9f-8rj4-w7jc
Moodle CSRF risk in admin preset tool management of presets
GHSA-r2wx-46gp-rp3h
Moodle Improper Input Validation
GHSA-8qwh-4vwv-7c5m
Moodle Cross-site Scripting (XSS)
GHSA-xqhh-253w-4q5f
Moodle Cross-site Scripting (XSS)
GHSA-9qgq-93c7-9hm4
Moodle stored Cross-site Scripting (XSS)
GHSA-4qww-rxq6-x7gf
Moodle broken access control when setting calendar event type
CVE-2024-34009
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
CVE-2024-34009
Insufficient checks whether ReCAPTCHA was enabled made it possible to ...
CVE-2024-34008
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-r99q-hmqv-xw8w Moodle Authenticated LFI risk in some misconfigured shared hosting environments | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
| GHSA-gq9f-8rj4-w7jc Moodle CSRF risk in admin preset tool management of presets | CVSS3: 8.4 | 0% Низкий | больше 1 года назад |
| GHSA-r2wx-46gp-rp3h Moodle Improper Input Validation | 1% Низкий | больше 1 года назад | |
| GHSA-8qwh-4vwv-7c5m Moodle Cross-site Scripting (XSS) | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-xqhh-253w-4q5f Moodle Cross-site Scripting (XSS) | CVSS3: 5.4 | 1% Низкий | больше 1 года назад |
| GHSA-9qgq-93c7-9hm4 Moodle stored Cross-site Scripting (XSS) | CVSS3: 6.1 | 1% Низкий | больше 1 года назад |
| GHSA-4qww-rxq6-x7gf Moodle broken access control when setting calendar event type | CVSS3: 6.2 | 0% Низкий | больше 1 года назад |
 | CVE-2024-34009 Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-34009 Insufficient checks whether ReCAPTCHA was enabled made it possible to ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-34008 Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу